This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft File: ycTTQSeR46PplAQFieyK0vWP4xI.mft (raw, json) Hash identifier: 9qY82CEvXsWd0LnmnO0nb/4VskQcHoLg6odoiiq/avc= Subject key identifier: 79:67:25:E4:7B:34:3A:C6:44:6C:C7:71:89:97:41:1F:17:68:20:4E Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12 Certificate issuer: /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312 Certificate serial: 019B5A51773420A128CC927339F844FE5068 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 11:00:46 +0000 Manifest this update: Fri 26 Dec 2025 11:00:46 +0000 Manifest next update: Sat 27 Dec 2025 11:00:46 +0000 Files and hashes: 1: mMGnUGaN6rsw58xOd0MAF_HAY9o.roa (hash: 0HzReZTMzsNR7hcuVRKNU/DysaBkSSFxX1IonoMajpg=) 2: ycTTQSeR46PplAQFieyK0vWP4xI.crl (hash: 6pgs1A6WBDPpqcvskO2dGh/ZIaSEObKSlk86Tj6LXGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:77:34:20:a1:28:cc:92:73:39:f8:44:fe:50:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312 Validity Not Before: Dec 26 11:00:46 2025 GMT Not After : Dec 27 11:00:46 2025 GMT Subject: CN=796725e47b343ac6446cc7718997411f1768204e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:ad:59:9d:0d:d9:fa:be:61:ac:46:be:dd: 6d:30:92:61:15:2f:1a:d7:4b:4c:ab:50:ec:a0:5b: f5:8d:a3:90:0b:5b:40:dc:bf:b9:14:5d:16:8f:0c: 5c:34:fc:8b:93:41:9a:a0:60:4b:f3:cf:49:85:fd: 59:0a:51:0e:18:5d:14:f2:9b:4b:39:20:9e:14:ea: bd:c6:17:e2:d8:c2:1e:a8:f1:e5:2b:98:d5:33:4f: 25:99:f4:f2:60:94:3a:b2:81:e3:40:a3:51:6a:c4: 8c:43:6b:3d:bd:0a:12:c4:6c:02:9d:e0:82:68:3a: b6:90:58:66:e8:53:95:bb:54:b7:70:5c:e6:8e:e5: f4:32:99:ac:b1:72:a0:3a:99:a3:1e:bb:eb:76:67: 37:db:69:96:93:a6:97:0f:c4:57:fd:45:9f:ec:d9: c9:66:66:98:58:2e:62:bc:7d:07:39:ab:bf:e0:06: 5f:8d:5b:7c:6d:3a:be:18:c9:06:2d:55:5d:65:fa: 93:34:e4:9b:77:b1:cf:29:30:40:97:ba:12:1d:38: 5d:e7:ff:fd:37:b9:44:7c:43:c4:4d:85:1f:f1:02: 45:88:30:6f:58:35:6f:16:77:0f:13:1a:fb:19:59: fc:88:04:00:dd:a4:08:0b:e6:f3:d5:32:4b:af:ff: c7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:67:25:E4:7B:34:3A:C6:44:6C:C7:71:89:97:41:1F:17:68:20:4E X509v3 Authority Key Identifier: keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:5a:06:93:71:ba:b3:41:fe:29:ab:72:0b:b2:7a:4a:b8:bf: ce:97:a1:d2:a8:3b:44:e3:87:cb:bd:34:ba:67:4e:cb:94:d9: c7:4c:1d:c4:21:f1:19:05:3f:6a:eb:b7:fc:ac:d1:59:8a:9d: 5c:19:2d:c1:33:36:0f:74:c7:00:85:ed:fb:93:e7:13:18:07: fd:92:66:7f:79:fc:c8:a2:61:22:5b:3a:46:5e:23:f5:13:89: b9:4f:5e:0d:c0:ee:d5:10:96:e3:e6:59:6d:d5:b6:93:c2:79: 04:99:6c:87:9b:19:4b:41:3e:2b:ed:d6:86:0f:04:ce:d5:36: 3b:12:8a:46:d3:97:b8:12:ce:64:f4:d6:f9:76:bf:31:93:c1: a8:67:53:04:65:4a:3f:0d:93:c5:4a:4d:ee:00:12:0e:d7:5c: 13:9f:70:74:ea:5d:d1:13:8b:c0:d5:a6:42:1f:2b:cf:49:a9: 3a:08:6f:b7:a6:68:68:43:bf:57:ef:2f:b7:be:35:de:ca:21: 2d:28:4c:8a:bf:2e:8f:9a:44:11:df:33:ab:69:54:ff:69:69: 67:bd:ca:32:3a:6a:cd:1c:50:ee:aa:16:bd:58:9d:57:66:a7: c2:68:90:cc:40:ec:93:6f:a1:b5:72:d2:07:fb:1d:f1:f7:e0: 79:9a:f2:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUXc0IKEozJJzOfhE/lBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YzRkMzQxMjc5MWUzYTNlOTk0MDQwNTg5ZWM4YWQyZjU4 ZmUzMTIwHhcNMjUxMjI2MTEwMDQ2WhcNMjUxMjI3MTEwMDQ2WjAzMTEwLwYDVQQD Eyg3OTY3MjVlNDdiMzQzYWM2NDQ2Y2M3NzE4OTk3NDExZjE3NjgyMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlWtWZ0N2fq+YaxGvt1tMJJhFS8a 10tMq1DsoFv1jaOQC1tA3L+5FF0WjwxcNPyLk0GaoGBL889Jhf1ZClEOGF0U8ptL OSCeFOq9xhfi2MIeqPHlK5jVM08lmfTyYJQ6soHjQKNRasSMQ2s9vQoSxGwCneCC aDq2kFhm6FOVu1S3cFzmjuX0MpmssXKgOpmjHrvrdmc322mWk6aXD8RX/UWf7NnJ ZmaYWC5ivH0HOau/4AZfjVt8bTq+GMkGLVVdZfqTNOSbd7HPKTBAl7oSHThd5//9 N7lEfEPETYUf8QJFiDBvWDVvFncPExr7GVn8iAQA3aQIC+bz1TJLr//H9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlnJeR7NDrGRGzHcYmXQR8XaCBOMB8GA1UdIwQY MBaAFMnE00EnkeOj6ZQEBYnsitL1j+MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWNUVFFTZVI0NlBwbEFRRmlleUswdldQNHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jMmM4YmYtZGNlNC00MjgzLWJmNzIt Y2M3Zjg3ZjRhOTUwLzEveWNUVFFTZVI0NlBwbEFRRmlleUswdldQNHhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jMmM4YmYtZGNlNC00MjgzLWJmNzItY2M3Zjg3ZjRhOTUw LzEveWNUVFFTZVI0NlBwbEFRRmlleUswdldQNHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYloGk3G6 s0H+KatyC7J6Sri/zpeh0qg7ROOHy700umdOy5TZx0wdxCHxGQU/auu3/KzRWYqd XBktwTM2D3THAIXt+5PnExgH/ZJmf3n8yKJhIls6Rl4j9ROJuU9eDcDu1RCW4+ZZ bdW2k8J5BJlsh5sZS0E+K+3Whg8EztU2OxKKRtOXuBLOZPTW+Xa/MZPBqGdTBGVK Pw2TxUpN7gASDtdcE59wdOpd0ROLwNWmQh8rz0mpOghvt6ZoaEO/V+8vt7413soh LShMir8uj5pEEd8zq2lU/2lpZ73KMjpqzRxQ7qoWvVidV2anwmiQzEDsk2+htXLS B/sd8ffgeZryCg== -----END CERTIFICATE-----Generated at Fri Dec 26 21:01:19 2025 by rpki-client